Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/FEFkA-1aJvmdr6xoh46NTO3SAEA.roa
File: FEFkA-1aJvmdr6xoh46NTO3SAEA.roa (raw, json)
Hash identifier: jiEeWkmKuNlb1RfXZcY8pLprhnm7AdHXnLFqbdm2rtI=
Subject key identifier: 14:41:64:03:ED:5A:26:F9:9D:AF:AC:68:87:8E:8D:4C:ED:D2:00:40
Certificate issuer: /CN=41826ee90270fdd1423af8090726006718dfc6cf
Certificate serial: 01856D384FD52D22D38CFB153E6BA1416D81
Authority key identifier: 41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/FEFkA-1aJvmdr6xoh46NTO3SAEA.roa
Signing time: Sun 01 Jan 2023 12:04:44 +0000
ROA not before: Sun 01 Jan 2023 12:04:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9063
IP address blocks: 194.180.160.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:38:4f:d5:2d:22:d3:8c:fb:15:3e:6b:a1:41:6d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41826ee90270fdd1423af8090726006718dfc6cf
Validity
Not Before: Jan 1 12:04:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14416403ed5a26f99dafac68878e8d4cedd20040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:07:53:ed:91:44:9c:53:a0:11:e5:09:13:bb:
05:4d:d9:86:23:98:15:ce:c1:aa:2b:e9:9a:49:c2:
1a:4b:55:bd:14:68:f2:1c:6c:c4:8e:24:e2:14:be:
75:f5:23:7f:de:b9:33:92:80:32:ca:2e:13:d8:dc:
74:54:af:b7:7c:12:13:7e:81:cb:40:05:60:69:54:
21:14:dd:91:3a:d2:5c:ab:41:42:ef:aa:39:db:ad:
de:cb:58:cc:30:4c:76:b7:df:02:4b:6d:2f:39:eb:
b8:ea:62:08:c8:7f:60:d2:1c:e9:6b:36:d1:51:93:
6b:d9:56:e7:3c:ad:71:ac:ad:d1:3d:09:24:86:78:
8c:e7:3b:07:fa:e9:50:f6:af:a6:05:4f:17:03:82:
0c:ea:f1:c3:15:09:98:8a:62:05:9b:bc:ae:bf:5b:
11:03:7e:e0:dc:fd:36:79:87:7c:68:b3:29:81:8e:
99:cc:b7:00:b9:0b:c8:da:5b:3a:f8:57:f1:8a:c1:
75:85:d0:01:0a:1f:e4:cb:b0:df:f1:4f:f3:be:e2:
da:2f:2d:65:41:69:b1:41:de:e7:f3:33:82:3d:47:
5d:a2:8c:8d:69:b6:37:cd:cf:08:d9:de:19:54:d7:
19:9f:eb:1c:3b:9e:aa:56:63:ce:8d:3b:b3:6e:cf:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:41:64:03:ED:5A:26:F9:9D:AF:AC:68:87:8E:8D:4C:ED:D2:00:40
X509v3 Authority Key Identifier:
keyid:41:82:6E:E9:02:70:FD:D1:42:3A:F8:09:07:26:00:67:18:DF:C6:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QYJu6QJw_dFCOvgJByYAZxjfxs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/FEFkA-1aJvmdr6xoh46NTO3SAEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/7b7c36-698e-483a-b941-ee586d375a58/1/QYJu6QJw_dFCOvgJByYAZxjfxs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
a3:c1:fc:79:c5:2e:e9:67:cf:d2:9a:87:f9:af:54:9c:a2:c8:
fb:98:9a:28:87:e2:38:ec:17:7d:e3:ae:3d:38:46:00:7c:24:
9b:34:02:27:43:cf:c4:bb:25:4b:00:89:57:3b:12:de:5b:04:
e7:42:93:90:67:64:70:0d:d4:11:c8:bb:eb:5d:56:f1:ff:98:
11:61:26:86:42:2e:a9:4c:32:5a:25:bf:f0:82:19:10:6d:05:
2f:7d:14:26:4c:66:82:0f:de:97:a9:0a:a0:65:3c:98:98:1c:
c0:56:12:eb:53:a1:ef:8b:bc:51:1d:a1:1e:e9:18:92:85:94:
25:e0:2a:e7:6f:00:5d:17:74:de:40:fd:59:df:1e:de:fd:e9:
b9:08:64:16:32:64:29:56:a0:6b:d4:a3:27:34:1e:78:ea:f8:
66:aa:27:53:d7:bb:fc:7c:33:42:9b:3d:69:9e:50:29:30:cf:
5e:37:ad:1e:9a:19:15:da:4d:a4:e6:85:d8:f2:8b:79:7f:29:
fd:a1:97:cb:08:d0:04:d7:f0:0a:b5:65:8a:f6:cd:7e:d0:f2:
ed:54:28:14:61:bb:98:83:09:3d:37:20:89:1e:0e:31:78:ff:
04:43:37:62:c2:a7:1a:99:e7:6f:df:c5:f6:59:cb:66:ed:d7:
4b:e4:1a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 14:09:48 2024 by rpki-client on console.sobornost.net